@trops/dash-core 0.1.239 → 0.1.240

package/dist/electron/index.js

@@ -30983,6 +30983,7 @@ var schedulerController_1 = schedulerController$2;
 	const { dynamicWidgetLoader } = dynamicWidgetLoaderExports;
 	const { compileWidget, findWidgetsDir } = widgetCompiler$1;
 	const { toPackageId, parsePackageId } = packageId;
+	const { getStoredToken } = registryAuthController$1;
 
 	let WIDGETS_CACHE_DIR = null;
 	let REGISTRY_CONFIG_FILE = null;
@@ -31422,7 +31423,22 @@ var schedulerController_1 = schedulerController$2;
 	        `[WidgetRegistry] Downloading widget: ${widgetName} from ${downloadUrl}`,
 	      );
 
-	      const response = await fetch(downloadUrl);
+	      // Add auth header for registry API download endpoints
+	      const fetchOpts = {};
+	      const registryBase =
+	        process.env.DASH_REGISTRY_API_URL ||
+	        "https://main.d919rwhuzp7rj.amplifyapp.com";
+	      if (
+	        downloadUrl.includes(registryBase) ||
+	        downloadUrl.includes("/api/packages/")
+	      ) {
+	        const auth = getStoredToken();
+	        if (auth?.token) {
+	          fetchOpts.headers = { Authorization: `Bearer ${auth.token}` };
+	        }
+	      }
+
+	      const response = await fetch(downloadUrl, fetchOpts);
 	      if (!response.ok)
 	        throw new Error(`Failed to fetch: ${response.statusText}`);